node-rigorous/src/helpers/secure_user_input.js

Rigorous Framework

const RigorousError = require('../facades/RigorousError');
const errorsMessages = require('../etc/errorsMessages');

function secureInput(unitTextRaw, optional = true) {

    const map = {
        '&': '&',
        '<': '&lt;',
        '>': '&gt;',
        '"': '&#039;', // " = &quot"
        "'": '&#039;', // ' = &#039
    };

    if (!unitTextRaw) {
        if (optional) {
            throw new RigorousError(errorsMessages.UndefinedParameterInputError);
        } else {
            return null;
        }
    }

    return unitTextRaw.replace(/[&<>"']/g, (m) => { return map[m]; });

}
module.exports = {
    
    escapeHtml: (unitTextRaw, optional = true) => {

        let result = null;

        if (Array.isArray(unitTextRaw)) {

            result = [];
            
            unitTextRaw.forEach((input) => {
                result.push(secureInput(input, optional));
            });

        } else {

            result = secureInput(unitTextRaw, optional);
        }

        return result;
    },
};